Malicious PDF — malware analysis report

Static analysis result for SHA-256 190176f29a56a570…

MALICIOUS

PDF

19.3 KB Created: 2019-05-05 16:17:37 +01:00 Authoring application: mPDF 5.7
MD5: 1184757c5102d59532107b49b86d5d7a SHA-1: 133af6a04c85bc858f70f83035dea0e9e317a15e SHA-256: 190176f29a56a570dcdd173615b08d54a6d2717f4a3f472f4287d8accdf8921f
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, forming a link farm that directs users to external PDF files. This behavior is indicative of a phishing or content-luring scheme, likely intended to distribute further malicious content or lead users to malicious websites. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9097096091093/The-Love-of-the-Last-Tycoon-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/1091098099099090098/Flappers-and-Philosophers-1920-by-Francis-Scott-Fitzgerald-Francis-Scott-Key-Fitzgerald-September-24-1896---December-21-1940-Known-Professionally-as-F-Scott-Fitzgerald-Was-an-American-Novelist-and-Short-Story-Writer-Whose-Works-Illustrate-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/1099091091099095/The-Complete-Works-of-F-Scott-Fitzgerald-Classics-Book-8-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/3099094095096096/The-Tycoon-s-Socialite-Bride-In-Love-with-a-Tycoon-1-by-Tracey-Livesay.pdf
    • http://loaminoo.linkpc.net/1099092095095090/F-Scott-Fitzgerald-Tales-of-the-Jazz-Age-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/8091096098094095/Works-of-F-Scott-Fitzgerald-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/5094094091093095/Babylon-Revisited-and-Other-Stories-Fitzgerald-s-Greatest-Short-Stories-A-Collection-of-short-stories-from-the-author-of-The-Great-Gatsby-The-Side-Button-and-many-other-notable-works-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/8096092094092/Trimalchio-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/9096090099090092/Y-on-hell-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/6091092093094093/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/1091093097092099092/Babylon-Revisited-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/5094099092093093/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/3099096091094091/Flappers-and-Philosophers-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/4099091094095094/The-Cut-Glass-Bowl-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/3097091099096097/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/1091098094095095093/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/5093092093099092/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/6095091093090098/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/8093097098092094/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/1091090092090099096/The-Great-Gatsby-by-F-Scott-Fitzgerald.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.